Staff

Staff

---

Information about the company's employees and managers is essential for us, enabling us to reconstruct the internal corporate structure. With this information, we will be able to identify the different departments' managers and design our social engineering attacks better and more efficiently. We are not yet looking at individual employees, but rather looking at who is employed, who is in charge of what, who is responsible for what, and try to get a picture of the internal communication flow.

The methodology we have used so far can also be applied to staff. However, this field covers many potential attack vectors for phishing campaigns and social engineering attacks, which we need to filter out. We will get many valuable results, but this does not cover everything applied to the staff. This field will be discussed in more detail in the Module OSINT: Staff Investigation.

In this step, we should continue to focus on getting an overview of the company's employees to gain insight into its internal structure and hierarchy and to be able to reconstruct it if necessary.

There are many sources we can use to obtain this information. Among them are the following:

![[osint-staff.png]]

---